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An unauthorized I/O operation 
happens in guest OS 



FIG. 2 
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hypervisor catch a VMExit caused by 
this unauthorized I/O operation 




Hypervisor constructs an I/O request 
package and sent it to service OS 



Service OS routes the request 
package to the device mode! 
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Device model handles the request 
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Device model sends a feedback 
packet to the service OS 



210 



Service OS routes the feedback 
packet to the hypervisor 
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In-hypervisor 
device model 
handles the I/O 
request 
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in-hypervisor 
device model sends 
a feedback to the 
guest OS 
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Hypervisor sends the I/O feedback to 
the guest OS 



end 
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An interrupt initiated by in-hypervisor device 
mode) 
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Hypen/isor injects the interrupt into the guest OS 
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Guest OS handles the interrupt 
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FIG. 3 
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Hypervisor probes and installs the image of the 
frequently used device into the hypervisor 
through a certain channel 















the hypersivor locally handles an operation 
related to the installed device model and 
communicate the result to the guest OS 
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FIG 4 
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